API integrations are making the internet less secure (opinion piece)

&gt; a good practice to minimize damage is to routinely cycle API keys.<p>Anyone have a good measure for how frequently this should be done? Too frequently is too much toil and infrequently is a security risk.